Denial of 911 emergency service attacks prevention method

Abstract

A method for preventing Distributed Denial Of Service (DDOS) attacks on telecommunication systems handling special number calls such as 911 emergency systems launched from compromised personal computers equipped with modems connected to public telephone networks is disclosed. For each initiated call, a probability that the originator of the call is a computer device rather then a human is determined. The call is then further handled using determined probability of the call originator.

Description

BACKGROUND OF THE INVENTION [0001] Wide spreading and popularity of personal computers lead to a phenomenon known as computer viruses. Virus is a software program written by individuals with intention to enter a computer system without the users permission. Viruses spread by replicating themselves into other computers mainly using communication networks and vulnerabilities of modern operating systems. During the epidemic period millions of computers may become infected within few days. According to some software security sources [1], there are about 70,000 computer viruses known at the present time and about 2,000 new ones emerging every year. [0002] Once virus is executed it gains virtually unlimited control over the computer resources, including peripheral equipment connected to the system. At this point virus writers decide what to do next with the compromised computer system. They may leave a ‘backdoor’ open—a software tool for remote controlling the infected computer or replace...

AI Technical Summary

Benefits of technology

[0011] It is the goal of the present invention to increase the security of the public telephone networks and to reduce their vulnerability to the DDOS attacks launched from computer systems equipped with the modem devices.

[0012] In accordance with one aspect of the present invention, a method is provided to reduce the load onto the telecommunication network, public safety answering point (PSAP) staff and action stations during the periods of DDOS attacks. For each initiated call, the probability that the originator of the call is a computer device rather then a human is determined. The call is then further handled using determined probability of the call originator. For example, during high volume situations caused by DDOS attacks, calls may be re-routed, prioritized or terminated based on the obtained probability to avoid overflow.

Problems solved by technology

During the epidemic period millions of computers may become infected within few days.

One of the known damages that computer viruses do is performing distributed denial of service (DDOS) attacks on popular corporate Internet web servers.

The mechanism of the attack is based on the large but still limited performance capacity of the server computer and local network equipment.

During the attack, thousands and could be millions of compromised computers start sending request to the target clogging networks and backlogging the server.

As the result, legitimate requests sent from regular users cannot reach the destination server causing the denial of service effect.

Much more dangerous but fortunately not spread yet form of DDOS attack is one that is targeting public telephone networks launched from personal computers equipped with modems.

Such attacks may easily disrupt public telephone communications for prolonged periods of time.

Of course not every computer with a modem installed is connected to the public telephone network.

Images